Privacy policy
Last updated 23 September 20261. Who is responsible
Your data is handled by Cov’Heart’s Gallery. For any question about your data: coveheartsgallery@gmail.com.
2. Data we collect
When you create an account: your email address, your password (stored encrypted, we never see it), your username, and if you add them, a display name, a bio and a profile picture.
What you publish: your ratings, reviews, galleries, comments, likes and follows. They are public and appear on your profile.
When you write to us: your name, email address, topic and message.
Technical data: our host keeps short-lived logs (such as IP addresses) to run and protect the site.
3. Why we use it
To run your account and show your public activity to other Collectors (necessary to provide the service you signed up for), to answer your messages, and to keep the site secure (our legitimate interest).
No advertising, no selling of data, no profiling.
5. Who processes it
Supabase (accounts, database and images, stored in Ireland) and Vercel (hosting, which may process data in the United States under the European Commission’s standard contractual clauses). Emails sent by the site (confirmation, password reset) go through our email provider. Nobody else receives your data.
6. How long we keep it
Account data for as long as your account exists; it is erased within 30 days after you delete it. Contact messages for 12 months after our last exchange. Hosting logs for a few days.
7. Your rights
You can access, correct, export or delete your data, object to its use or ask us to limit it, by writing to coveheartsgallery@gmail.com. We answer within one month. You can also delete your account yourself at any time from Settings.
You can also lodge a complaint with the CNIL, the French data protection authority (cnil.fr).
8. Minimum age
You must be at least 15 years old to create an account.